A vulnerability disclosure policy (VDP), also referred to as a responsible disclosure policy, describes how an organization will handle reports of vulnerabilities submitted by ethical hackers. A VDP must thus be easily identifiable via a simple way, a security.txt notice.

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Contact: mailto:noc@purenrg.com
Encryption: https://www.purenrg.com/.well-known/emailkey.txt
Canonical: https://www.purenrg.com/.well-known/security.txt
Preferred-Languages: en
-----BEGIN PGP SIGNATURE-----

iQEzBAEBCAAdFiEEVs6buEY7EdMynzvfyhwDZfz9OyAFAl9KqXwACgkQyhwDZfz9
OyC9fQf+NdeHw/UwbR3F9EKYpx6PWLEAmpkYgrz2K/dMJTxELXFm5h/7M7qoALTz
iRBx1/Lwi1BC7JeNWD/RKAp5HKTteDiGgwFDWo1Xve5BQz56wpxgXtIfP1ytIy3a
7Lcy7tugy0e3aSGWvA5lc6cbO2zlZdJ3Ij606nap3lujsmsYi1niS0bEJJ5eEfpt
n4VOAESNFJjR8cOO7atUu0i2CTsZ4m6kPDl7+ng85Sln/TiFZ0z4BoKQiHmUKDdB
5Yjvt/JMhDEK6ityA1yng1dCv8AuFka9dWb8t0zYSzdaFiS+OYZmdkBG/sOODrjW
60OshX4iSarX1LylCvoi8PQtoD/lbw==
=9sk3
-----END PGP SIGNATURE-----